How Canadian credit reporting differs from the U.S., explained

The two names on a Canadian credit report will look familiar — Equifax Canada and TransUnion Canada are the country's two national credit bureaus, the same corporate families active in the U.S. What's different is the law behind them. The U.S. runs credit reporting through one federal statute, the Fair Credit Reporting Act, enforced mainly by one agency. Canada has no equivalent single law or single enforcer — the same basic function runs through a federal privacy statute, a provincial opt-out in three provinces, and a separate consumer-reporting act layered on top in most provinces. Which rule actually applies to your file depends on where you live.

Same two bureaus, no equivalent to the FCRA

Equifax Canada and TransUnion Canada are the only two national credit bureaus operating in Canada — there's no government-run bureau, and Experian doesn't operate as a consumer credit bureau there the way it does in the U.S. But there's no Canadian statute that does what the Fair Credit Reporting Act does federally in the U.S.: one law specifically defining what a "consumer reporting agency" is, what it can put on a file, and how a consumer disputes it. Instead, two separate legal layers apply at once, and neither one is credit-reporting-specific the way the FCRA is.

Layer one: a federal privacy law, with three provinces opted out

The federal Personal Information Protection and Electronic Documents Act (PIPEDA) governs how a private-sector organization — including a credit bureau — collects, uses, and discloses personal information generally; it isn't written around credit reporting specifically, and covers commercial personal-information handling of every kind. PIPEDA applies by default across the country, but Quebec, Alberta, and British Columbia have each passed their own private-sector privacy statute that the federal government has formally recognized as "substantially similar" to PIPEDA. Where that recognition exists, the provincial law applies instead of PIPEDA for activity that happens inside that province (PIPEDA still governs interprovincial and international transfers, and still applies by default in every other province and territory). In practice, a privacy complaint about a Canadian credit bureau goes to a different regulator depending on where you live: the federal Office of the Privacy Commissioner of Canada (OPC) in most of the country, Québec's Commission d'accès à l'information (CAI) in Québec, Alberta's Office of the Information and Privacy Commissioner in Alberta, or British Columbia's Office of the Information and Privacy Commissioner in B.C.

Layer two: a separate, older consumer-reporting act, and it isn't the same everywhere

On top of privacy law, most provinces also have a dedicated, older consumer- or credit-reporting statute — a second law specifically about what a reporting agency can put in a file, for how long, and what a consumer can see and dispute. Ontario's is the Consumer Reporting Act; British Columbia folds equivalent rules into Part 6 of its Business Practices and Consumer Protection Act; Alberta regulates it through its Consumer Protection Act and a dedicated Credit and Personal Reports Regulation. This is the layer that does the specific job the FCRA does in the U.S. — and because it's set province by province rather than in one federal statute, the actual rule isn't identical everywhere.

A concrete example of the difference: Alberta's regulation bars a reporting agency from disclosing unfavourable information about a debt once more than six years have passed since the last payment on that debt or since it was incurred, whichever is later. Ontario's Consumer Reporting Act uses a seven-year cutoff for an unpaid debt or collection instead — and, unlike the current U.S. practice our own judgments and tax liens explainer describes, where a private industry standard now keeps nearly all civil judgments off a U.S. credit report, Ontario's statute explicitly still allows a judgment to be reported for up to seven years, provided the creditor confirms on request that it remains unpaid. Two provinces, two different cutoffs, for the same basic category of information.

No FCAC oversight of the bureaus themselves, and no single national enforcer

The Financial Consumer Agency of Canada (FCAC) is the closest thing Canada has to a national financial-consumer regulator, but its supervisory authority runs to federally regulated banks and other federally regulated financial entities — not to Equifax Canada or TransUnion Canada as credit bureaus. FCAC itself says plainly that it does not oversee credit bureaus or how they use the data they receive, because credit reporting is a matter of provincial jurisdiction; there's no Canadian equivalent to the way the Consumer Financial Protection Bureau directly oversees credit bureaus in the U.S. Oversight of the bureaus themselves is split instead between whichever privacy regulator has jurisdiction (above) and each province's own consumer-affairs office enforcing its own consumer-reporting statute.

Free access exists — it's just not centralized

Both bureaus are required to give a consumer free access to their own file, and both offer it by mail, phone, or online request. What Canada doesn't have is a single centralized site playing the role AnnualCreditReport.com plays in the U.S. — there's no one federally mandated portal; a Canadian resident requests a free report from Equifax Canada and TransUnion Canada separately, through each bureau's own process.

Why this actually matters: "what are my credit-report rights" doesn't have one answer that holds across Canada. Which privacy regulator has jurisdiction, and what a provincial consumer-reporting act actually allows on a file and for how long, both depend on the province you live in — closer, structurally, to how U.S. credit-repair regulation varies once you leave federal law and look at individual states (see our state-by-state bonding and registration explainer) than to the single-federal-statute model the FCRA itself represents.